diff --git a/modules/user/user.module b/modules/user/user.module
index bae0ffc..78953b4 100644
--- a/modules/user/user.module
+++ b/modules/user/user.module
@@ -1036,6 +1036,9 @@ function user_account_form(&$form, &$form_state) {
         '#access' => !empty($protected_values),
         '#description' => $current_pass_description,
         '#weight' => -5,
+        // Do not let web browsers remember this password, since we are trying
+        // to confirm that the person submitting the form actually knows the
+        // current one.
         '#attributes' => array('autocomplete' => 'off'),
       );
       $form['#validate'][] = 'user_validate_current_pass';